Authorization Vulnerability in TP-Link RE305 V3 Wireless Range Extender
CVE-2026-102816

5.3MEDIUM

Key Information:

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-102816?

An authorization vulnerability in the country or region configuration interface of the TP-Link RE305 V3 wireless range extender allows unauthenticated attackers on the same local network to modify the wireless regulatory region settings. This exploitation can lead to unwanted wireless configuration changes, resulting in interruptions to wireless connections, unavailable channels, and potential client disconnections or service instability. Devices may unknowingly apply parameters meant for different regulatory regions, which can compromise overall network integrity.

Affected Version(s)

RE305 v3 0 < 1.1.8 Build 20260921 Rel. 42853

References

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Victor Mota
.